There was a window wherein a new backend process could
read a stale init file but miss the inval messages that
would tell it the data is stale. The result would be
bizarre failures in catalog accesses, typically
"could not read block 0 in file
..." later during startup.

Fix memory leak at end of a GiST index scan (Tom
Lane)

Commands that perform many separate GiST index scans,
such as verification of a new GiST-based exclusion
constraint on a table already containing many rows, could
transiently require large amounts of memory due to this
leak.

The typical symptom of this problem was "The function requested is not supported"
errors during SSPI login.

Throw an error if pg_hba.conf
contains hostssl but SSL is
disabled (Tom Lane)

This was concluded to be more user-friendly than the
previous behavior of silently ignoring such lines.

Fix typo in pg_srand48
seed initialization (Andres Freund)

This led to failure to use all bits of the provided
seed. This function is not used on most platforms (only
those without srandom), and
the potential security exposure from a
less-random-than-expected seed seems minimal in any
case.